Bakvora is designed so that nobody — including us — can read your backups.
Each job gets its own random AES-256 data key. That key is wrapped twice: once with a key derived from your job password using PBKDF2, and once with Windows DPAPI bound to the machine. On the original machine restores are seamless; on a new machine your password unlocks them. Lose both, and the data is unreadable — by design.
Database and network passwords are encrypted at rest and used only for the job they belong to. Network connections use per-job impersonation and never write anything to Windows Credential Manager. Application user passwords are salted and hashed, never stored in plain text.
Bakvora does not upload your files or databases anywhere except the destinations you configure. The only connections to our servers are license activation and update checks, which contain license and version information — never your backup content.
Licenses are signed with RSA-2048 and bound to a hardware fingerprint. Updates are delivered by a dedicated updater that replaces the application only after the download completes.
Try every feature free for 30 days. No credit card, no commitment.
